Route Origin Authorization
$ rpki-client -vvf rpkica.twnic.tw/rpki/TWNICCA/TUNGHO/wmTmHE8U9NoMqw76EBIxtVgTMZY.roa
File: wmTmHE8U9NoMqw76EBIxtVgTMZY.roa (raw, json)
Hash identifier: z8KBBIpa/dyOhx/xjAu7H941uaczEz7QUv4BPz2ulnU=
Subject key identifier: C2:64:E6:1C:4F:14:F4:DA:0C:AB:0E:FA:10:12:31:B5:58:13:31:96
Certificate issuer: /CN=EB675F938C85021374CAB1E1AF5099319B110B07
Certificate serial: 2949
Authority key identifier: EB:67:5F:93:8C:85:02:13:74:CA:B1:E1:AF:50:99:31:9B:11:0B:07
Authority info access: rsync://rpkica.twnic.tw/rpki/TWNICCA/62dfk4yFAhN0yrHhr1CZMZsRCwc.cer
Subject info access: rsync://rpkica.twnic.tw/rpki/TWNICCA/TUNGHO/wmTmHE8U9NoMqw76EBIxtVgTMZY.roa
Signing time: Fri 01 Sep 2023 10:06:21 +0000
ROA not before: Fri 01 Sep 2023 10:06:21 +0000
ROA not after: Sat 31 Aug 2024 03:10:53 +0000
asID: 38841
IP address blocks: 106.1.216.0/22 maxlen: 22
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 10569 (0x2949)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=EB675F938C85021374CAB1E1AF5099319B110B07
Validity
Not Before: Sep 1 10:06:21 2023 GMT
Not After : Aug 31 03:10:53 2024 GMT
Subject: CN=C264E61C4F14F4DA0CAB0EFA101231B558133196
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:de:e0:5b:ab:13:86:95:5a:3b:b5:c0:74:85:01:
30:2c:91:8d:d6:4c:03:ba:19:fb:8e:78:59:51:a6:
11:2d:f0:61:e3:67:38:f3:70:ec:07:81:33:95:1f:
80:1a:f5:e1:24:d6:0a:5c:c9:9a:9a:6f:94:1a:0a:
74:cf:e6:00:93:31:53:e4:67:0a:42:3e:b0:f3:39:
1e:8a:a6:e8:49:85:f5:47:63:6f:2c:dc:0d:2e:85:
1f:dc:77:d5:f6:48:9b:65:8c:53:5f:68:8c:79:28:
ac:f8:22:a7:f2:a0:5b:7a:5c:6f:96:f9:c4:cc:c8:
fe:f7:bd:d9:53:c1:03:6f:b7:31:00:79:e0:de:28:
33:48:98:7a:dd:e5:9e:44:d3:8b:fb:36:9f:ea:94:
d3:ea:87:e7:e8:be:5a:3c:ec:ee:64:c2:d8:32:a6:
d0:30:a1:35:66:37:86:5f:c0:25:7a:65:a5:ad:f7:
ca:65:ba:8b:5d:75:08:96:20:2b:c1:00:f7:19:74:
52:71:3c:92:42:9e:69:00:cd:96:e5:e4:ad:12:f2:
67:c6:6d:ac:aa:84:82:22:3c:17:dd:d2:8a:17:ae:
ac:08:4d:74:9b:b9:91:2f:b1:b0:6c:32:7c:81:8a:
7d:3e:cd:2e:7a:ff:ba:55:2e:35:da:dd:d1:15:86:
41:df
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
C2:64:E6:1C:4F:14:F4:DA:0C:AB:0E:FA:10:12:31:B5:58:13:31:96
X509v3 Authority Key Identifier:
keyid:EB:67:5F:93:8C:85:02:13:74:CA:B1:E1:AF:50:99:31:9B:11:0B:07
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/TUNGHO/62dfk4yFAhN0yrHhr1CZMZsRCwc.crl
Authority Information Access:
CA Issuers - URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/62dfk4yFAhN0yrHhr1CZMZsRCwc.cer
X509v3 Key Usage: critical
Digital Signature
Subject Information Access:
Signed Object - URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/TUNGHO/wmTmHE8U9NoMqw76EBIxtVgTMZY.roa
RPKI Notify - URI:https://rrdp.twnic.tw/rrdp/notify.xml
sbgp-ipAddrBlock: critical
IPv4:
106.1.216.0/22
Signature Algorithm: sha256WithRSAEncryption
0f:d7:52:2f:77:d5:e4:9f:a5:6f:5c:08:43:3a:9d:ca:6f:5b:
32:07:00:92:9b:c0:66:53:ef:8f:78:eb:86:c2:a6:b9:2c:ba:
27:b7:57:c7:63:cf:5c:9a:74:61:b0:02:5c:3f:d5:b1:73:c0:
6e:5a:ff:bf:2e:60:6e:03:a2:bd:52:af:d7:eb:fb:b8:2c:01:
77:9c:00:ac:71:2c:05:8f:3f:4b:c7:41:27:6b:d9:85:25:06:
5c:b8:91:bf:3e:e2:b0:42:92:67:4d:fb:1a:3f:c7:c8:ae:54:
07:d4:19:b5:99:4d:38:01:cf:b1:c0:80:07:88:ac:78:c6:0a:
d8:2d:ef:78:38:07:f9:95:32:45:e8:25:4c:36:2f:ae:77:fe:
2d:d4:c1:58:ad:fb:ff:b4:8d:5b:8c:fb:ad:8b:c5:34:4c:0b:
60:ea:a2:b1:c8:b3:ae:5c:50:a7:2b:22:e3:46:04:cf:bb:78:
cd:3f:4d:2e:09:0c:83:a6:56:c9:68:7e:db:29:25:a3:06:33:
69:d7:81:84:8f:54:6e:a9:db:bd:bc:4e:5b:43:2f:ee:f9:84:
29:66:47:91:a4:d0:dc:33:85:19:db:bb:17:84:52:87:7b:a9:
18:a6:d1:c0:8d:9a:f4:11:07:36:e7:4e:3b:7e:65:ab:ce:31:
fc:57:62:72
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Aug 26 08:57:26 2024 by rpki-client on console-fra.rpki-client.org